ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Abhay Kulkarni (JIRA)" <j...@apache.org>
Subject [jira] [Created] (RANGER-1553) Audit log record for 'show databases' hive command contains all tags
Date Tue, 02 May 2017 02:06:04 GMT
Abhay Kulkarni created RANGER-1553:
--------------------------------------

             Summary: Audit log record for 'show databases' hive command contains all tags
                 Key: RANGER-1553
                 URL: https://issues.apache.org/jira/browse/RANGER-1553
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 1.0.0
            Reporter: Abhay Kulkarni
            Assignee: Abhay Kulkarni
             Fix For: 1.0.0


If hive service is associated with a tag service, then when a ‘show databases’ command
is authorized by Ranger, potentially, all tags associated with all hive entities are evaluated
to determine the authorization of the command. Consequently, the audit log record generated
for it will show, in the tags field, every tag provisioned for any hive entity in Ranger.
With large number of tags associated with hive entities, the audit log is very cluttered and
does not convey meaningful information. For the sake of usability, it will be better not to
log all tags in the corresponding audit log record for this specific command.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message